CVE-2026-26452: Ccoap vulnerability
Published Aug 27, 2026
·Updated
ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 lcontains a vulnerability in the option parsing logic that causes a segmentation fault when processing COAP messages containing invalid option numbers.
Affected Software
1 affected component
ccoap
Event History
Aug 27, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:17 PM
Description
Frequently Asked Questions
1
What is the practical impact of sending a malformed CoAP message?
Processing a CoAP message with invalid option numbers can cause ccoap to segfault, resulting in a denial of service for the affected process.
2
What input must an attacker be able to provide?
An attacker needs to be able to send a CoAP message that the affected ccoap instance will process, with invalid option numbers.